Cybersecurity

Cybersecurity
GMO Offers $1M Bounty After Onamae Desktop Cloud Data Leak
GMO Internet told Onamae Desktop Cloud customers to power off PCs after attackers leaked data, then opened a bounty of up to $1 million for ...
Cybersecurity
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private partners.
Application Security
Attackers Probe Oracle EBS SQL Injection CVE-2026-101767
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched last week.
AI Security
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Application Security
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
A Brazilian Magecart gang altered Convertr's Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs from shoppers, Sansec reports.
Cybersecurity
ENGIE Confirms French Customer Data Stolen via Partner Platform
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT systems were not hit.
Cybersecurity
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
Cybersecurity
Italy’s Chamber of Deputies Confirms Email Accounts Targeted
Italy's Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to Giorgia Meloni.
Application Security
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.
CVE Vulnerability Alerts
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.